docs: update CLAUDE.md for Fingerbank integration
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
@@ -56,13 +56,18 @@ One login instead of logging into Proxmox, Zabbix, OMV, and every service separa
|
|||||||
(real ARP entries live in the host's network namespace, not Docker's bridge network). API reads the
|
(real ARP entries live in the host's network namespace, not Docker's bridge network). API reads the
|
||||||
resulting JSON each poll cycle. Sortable by every column in the UI (click a header, click again to
|
resulting JSON each poll cycle. Sortable by every column in the UI (click a header, click again to
|
||||||
reverse). Full reasoning in `docs/device-discovery.md`.
|
reverse). Full reasoning in `docs/device-discovery.md`.
|
||||||
- **Identifying unknown devices** (done): four layers — MAC OUI vendor lookup (`mac-oui-lookup`,
|
- **Identifying unknown devices** (done): five layers — MAC OUI vendor lookup (`mac-oui-lookup`,
|
||||||
computed on read), mDNS hostname (added to the discovery sweep), manual labels (new `device_labels`
|
computed on read), mDNS hostname (added to the discovery sweep), manual labels (new `device_labels`
|
||||||
table keyed by MAC, inline-editable in the dashboard, takes priority), and an admin-triggered
|
table keyed by MAC, inline-editable in the dashboard, takes priority), an admin-triggered
|
||||||
**on-demand deep check** per unknown device (mDNS + targeted SSDP/UPnP + curated port scan + HTTP
|
**on-demand deep check** per unknown device (mDNS + targeted SSDP/UPnP + curated port scan + HTTP
|
||||||
title grab, runs on the CT122 host via a *parameterized* SSH forced-command reading
|
title grab, runs on the CT122 host via a *parameterized* SSH forced-command reading
|
||||||
`$SSH_ORIGINAL_COMMAND`, strictly validated). Full writeup in `docs/device-discovery.md`. Already
|
`$SSH_ORIGINAL_COMMAND`, strictly validated), and optional **Fingerbank** enrichment folded into that
|
||||||
resolved ~59/71 devices including "Ring LLC" and multiple "Amazon Technologies Inc." entries.
|
same button (MAC + SSDP SERVER header, gated behind `FINGERBANK_API_KEY`, runs directly from the API
|
||||||
|
container — no host-level access needed, unlike the other deep-check steps). Full writeup in
|
||||||
|
`docs/device-discovery.md`. Already resolved ~59/71 devices including "Ring LLC" and multiple "Amazon
|
||||||
|
Technologies Inc." entries. Fingerbank's honest ceiling without DHCP fingerprint data (which we don't
|
||||||
|
have — not the DHCP server) is manufacturer-level confidence, same as free OUI — documented plainly,
|
||||||
|
not oversold; UI shows the confidence band so a low-confidence guess isn't mistaken for a confirmed ID.
|
||||||
Two real bugs hit while building this: `mac-oui-lookup`'s named export crashed the whole process at
|
Two real bugs hit while building this: `mac-oui-lookup`'s named export crashed the whole process at
|
||||||
startup under Node ESM/CJS interop (works fine under `require()`, fails under `import { x } from`,
|
startup under Node ESM/CJS interop (works fine under `require()`, fails under `import { x } from`,
|
||||||
confirmed by running the built output with `node`, not just `tsc`); and SQLite's `ALTER TABLE ADD
|
confirmed by running the built output with `node`, not just `tsc`); and SQLite's `ALTER TABLE ADD
|
||||||
|
|||||||
Reference in New Issue
Block a user